Linux Distros Unpatched Vulnerability : CVE-2026-54634

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Hamlib is a ham radio control library for radios, rotators, and amplifiers. Prior to 4.7.2, the unauthenticated rigctld sendraw command on TCP port 4532 reaches...

RHEL 10 : tomcat update (Moderate) (RHSA-2026:69259)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:69259 advisory. Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. Security Fixes: Apache Tomcat: Apache...

RHEL 10 : curl (RHSA-2026:69125)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:69125 advisory. The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including...

The vulnerability of the sftp_symlink() function in the src/sftp.c component of the SSH2 protocol implementation library Libssh2 allows a attacker to disclose sensitive information or cause service failures.

The vulnerability of the sftpsymlink function in the src/sftp.c component of the SSH2 protocol implementation in the Libssh2 library is related to the issue of operations going beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to disclose sensitiv...

The vulnerability of the functions raw_client_psk(), raw_server_psk(), raw_cookie_generate(), and raw_stateless_cookie_generate() in the OpenSSL library’s src/ssl/callbacks.rs module allows a hacker to disclose sensitive information or cause service failures.

The vulnerability of the functions rawclientpsk, rawserverpsk, rawcookiegenerate, and rawstatelesscookiegenerate in the OpenSSL library’s src/ssl/callbacks.rs module is related to the execution of operations outside of memory buffers. Exploiting this vulnerability could allow an attacker to...

CVE-2026-94494: Authorization Bypass Through User-Controlled Key

jshERP through 3.6 contains a tenant isolation bypass vulnerability that allows authenticated users to read other tenants' records via the GET /tenant/info endpoint. Attackers can iterate the primary key to enumerate and access sensitive tenant data including login names, validity dates, user...

Vulnerability of the freerdp_image_copy_from_icon_data() function in the libfreerdp/codec/color.c file of the RDP client FreeRDP, which allows a hacker to disclose protected information or cause service failure.

The vulnerability of the freerdpimagecopyfromicondata function in the libfreerdp/codec/color.c file of the RDP client FreeRDP is related to a numerical overflow vulnerability. Exploiting this vulnerability could allow an attacker to disclose sensitive information or cause service failures...

CVE-2026-80984

creationtimestamp| type| source ---|---|--- 2026-09-20 18:10:05+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117304708418428139 2026-09-20 18:30:03+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mvxtd7png22g...

CVE-2026-81656

creationtimestamp| type| source ---|---|--- 2026-09-20 18:01:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvxrpuoc2p2m...

ntlmscout

/ // / / / / / / / / // / / / / / / / / / / / / / / / / // // / // / / // / // // / / /// //, // 露出したNTLMを狩る BoydHacks · github.com/BoydHacks root@kitploit: ntlmscout インターネットに露出したNTLMエンドポイントから、あらゆる情報を一滴残らず搾り取るための1つのツール。 認証されていないNTLMネゴシエーションは、資格情報が1つも送信される前に、驚くほど多くの内部Active...

CVE-2026-87067

creationtimestamp| type| source ---|---|--- 2026-09-20 16:01:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvxl2gjbcm22...

CVE-2026-80968

creationtimestamp| type| source ---|---|--- 2026-09-20 15:00:04+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mvxhlowjpc2o 2026-09-20 15:00:08+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117303961377350404...

CVE-2026-80994

creationtimestamp| type| source ---|---|--- 2026-09-20 13:30:03+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mvxckrps3w2l 2026-09-20 13:30:07+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117303607472673974...

CVE-2026-94104

creationtimestamp| type| source ---|---|--- 2026-09-20 12:01:53+00:00| seen| https://gist.github.com/ichintu/6f6d6a80c56f871cb012c31151e3888f 2026-09-20 15:03:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvxhso3kse2k 2026-09-21 04:40:04+00:00| seen|...

CVE-2026-86555

creationtimestamp| type| source ---|---|--- 2026-09-20 11:02:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7az3nlj2mqcj6 2026-09-21 00:00:04+00:00| seen| https://t.me/GithubRedTeam/102917 2026-09-22 00:00:10+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/102917...

CVE-2026-81913

creationtimestamp| type| source ---|---|--- 2026-09-20 10:20:20+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mvwxxjyfyw2v 2026-09-20 10:20:22+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117302861469151909...

CVE-2026-92423

The Meow Gallery WordPress plugin before 5.5.5 does not perform a proper capability check or restrict results to the requesting user's own posts before returning post data, allowing authenticated users with Author-level access and above to disclose the titles, authors, dates and statuses of other...

CVE-2026-81652

The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not verify that the requesting user is entitled to a given image record before returning it, allowing users with the Contributor role and above to read the stored metadata of any image on the site, including images in...

CVE-2026-93962

creationtimestamp| type| source ---|---|--- 2026-09-20 06:03:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvwjlwtexo2e 2026-09-20 06:06:24+00:00| seen| https://bsky.app/profile/potato.software/post/3mvwjri6w6j2g 2026-09-20 11:08:56+00:00| seen|...

CVE-2026-75596

creationtimestamp| type| source ---|---|--- 2026-09-20 05:20:12+00:00| seen| https://bsky.app/profile/gcpweekly.bsky.social/post/3mvwh6pqq4w2t 2026-09-20 05:20:13+00:00| seen| https://bsky.app/profile/gcpweekly.bsky.social/post/3mvwh6pwczh2b 2026-09-20 05:20:18+00:00| seen|...